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3. The drawings filed on 06 August 2001 are accepted by the Examiner. 
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DETAILED ACTION 

1 . Claims 1 -12 are pending. 

2. Claims 1-12 are allowable. 

Reasons for Allowance 

3. Claim 1 recites: 

A method for migrating a base chip key from a first computer system to a second computer 
system, wherein said first computer system includes a base chip key 1, and said second computer 
system includes a base chip key 2, said method comprising: 

Generating a second certificate for said base chip key 1 by a manufacturer of said second 
computer system using a first certificate for said base chip key 1, and generating a second 
certificate for said base chip key 2 by a manufacturer of said first computer system using a first 
certificate for said base chip key 2. 



Sending a first data packet from said first computer system to said second computer system, 
wherein said first data packet includes all data necessary to reproduce said base chip key 1 in 
said second computer system. 
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Sending a second data packet from said second computer system to said first computer system 
acknowledging the receipt of a copy of said base chip key 1 ; 

Erasing said base chip key 1 from said first computer system 

Replacing said base chip key 2 in said second computer system with said base chip key 1 . 

Claim 7 is a computer program product substantially similar to the elements of claim 1 . 

US patent 5745576 Abraham et al. discloses a method and apparatus for the initialization of a 
cryptographic terminal. 

Abraham et al. discloses: 

Two computer systems, the first computer system with a first base key, and a second computer 
system with a second base key, where the first computer is sold to the Acme Company, and the 
second is sold to the Baker company. (Column 6, lines 57-66), where it is the manufacturer that 
generates the base keys. 



Nordenstam et al (Figure 2) discloses: 
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• a first certificate for a first base key and a second certificate for a second base key, where 
the first certificate is the CERT 1 in the distributing unit, the first base key is private key 
1 , the second base key is private key 2(in item 20), and the first certificate for the second 
base key is CERT 2. 

• Sending a first data packet from said first computer system to said second computer 
system, wherein said first data packet includes all data necessary to reproduce said base 
chip key 1 in said second computer system, where the first data packet is the encrypted 
key information K and is sent from the distributing unit to the receiving unit (Column 8, 
lines 17-21), and where the data from the packet is regenerated into the base chip key 1 , 
the private key. (Column 8, lines 37-41) 

• Replacing said base chip key 2 in said second computer system with said base chip key 2, 
is replaced by the key that was sent by the distributing unit. (Column 4, lines 50-51) 

The SSL 3.0 Specification(Section 7.5 6 th paragraph, and Section 7.6.9) discloses: 

• Sending a second data packet from said second computer system to said first computer 
system acknowledging the receipt of a copy of said base chip key 1 , where base chip key 
1, is the key that was transferred, and the second data packet is a finished message sent 
by the client to the server telling that the key transfer was successful. 
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Neither Abraham et al 5 Nordenstam et al. 5 nor SSL 3.0 Specification disclose 

• Erasing said base chip key 1 from said first computer system, where the base chip key 1 
is the private key and can be erased. 

Nordenstam et al., however, does disclose 

• Erasing said base chip key 1 from a computer system, where the base chip key 1 is the 
private key and can be erased. (Column 4, lines 35-45) 

Neither Abraham et al, Nordenstam et al., nor SSL 3.0 Specification disclose: 

• Generating a second certificate for said base chip key 1 by a manufacturer of said second 
computer system using a first certificate for said base chip key 1, and generating a second 
certificate for said base chip key 2 by a manufacturer of said first computer system using 
a first certificate for said base chip key 2. 



The Examiner notes that, while it would be unusual to generate a second certificate for a key, the 
generation process would merely involve the creation of a certificate a second time and would be 
obvious to those of ordinary skill in the art. 
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No reference, or combination of references can be found though, which would generate a second 
certificate from a first certificate for two disparate base chip keys by the manufacturer of each of 
the systems. 



Conclusion 

4. The following art not relied upon is made of record: 

• US patent 6,160,890 discloses a secret key transfer method using multiple keys. 

• US patent 6, 1 92, 1 30 discloses a method of transferring a key history. 

• US patent 6,038,322 and 6,215,878 discloses a method of key distribution through the 
use of certificates and certificate authorities. 



5. Any inquiry concerning this communication from the examiner should be directed to 
Thomas M Ho whose telephone number is (571)272-3835. The examiner can normally be 
reached on M-F from 9:30 AM - 6:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gregory A. Morse can be reached on (571)272-3838. 

The Examiner may also be reached through email through Thomas Ho6@us;pt^ : gov 



Any inquiry of a general nature or relating to the status of this application or proceeding should 

be directed to the receptionist whose telephone number is (571)272-2100, 

General Information/Receptionist Telephone: 571-272-2100 Fax: 703-872-9306 
Customer Service Representative Telephone: 571-272-2100 Fax: 703-872-9306 
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